Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: Qw/buSEBYykNRJmhhCTci85lqzDpgKGvGLB8mOr8rp0=
Subject key identifier: 2E:A7:DC:ED:1D:7A:6B:61:72:01:3A:22:3D:00:FB:74:16:97:AF:8F
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 0197BA7D514E56AB4DD850D3D4639CDDB812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 15B4
Signing time: Sun 29 Jun 2025 07:01:04 +0000
Manifest this update: Sun 29 Jun 2025 07:01:04 +0000
Manifest next update: Mon 30 Jun 2025 07:01:04 +0000
Files and hashes: 1: CMb4sSALz-KpBLSc_havR1--Rcg.roa (hash: tSEX+cRvKAqr6srk3pPXDdRAbuuNHsu00QGpp8uCSYw=)
2: Lf-7J_CEiQS4b7WeR5Eaw4iyRLQ.roa (hash: 99fN5956ngv/TFkL8FxEzwLHD53MuB+d8ra8OJh/4dM=)
3: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: ofqYZ50aBMEU1t2YQgpZmUDqAZ6npbBNP4GN0+bHkUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:51:4e:56:ab:4d:d8:50:d3:d4:63:9c:dd:b8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Jun 29 07:01:04 2025 GMT
Not After : Jun 30 07:01:04 2025 GMT
Subject: CN=2ea7dced1d7a6b6172013a223d00fb741697af8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:86:15:c0:92:9c:ce:d2:85:33:ad:d9:38:6b:
7b:84:0f:03:ca:38:de:c8:78:44:04:04:0c:91:89:
61:29:cf:8d:6c:2e:ea:d2:f8:4d:57:48:df:1f:5a:
c1:2b:1e:8d:2e:ff:f1:03:a5:5f:fe:d2:51:bd:09:
46:25:b2:66:b4:d3:ff:14:ed:53:31:65:1d:2c:bd:
b9:36:4d:75:c4:33:57:15:bc:fb:be:6a:53:9c:a3:
ec:e9:ad:84:91:0d:95:a4:dc:ff:3d:a6:09:72:d5:
97:c3:c2:51:da:b7:c0:02:eb:92:04:95:19:e3:3c:
2e:13:fe:d8:14:a2:dd:9e:85:d3:5d:b9:fa:bf:df:
43:58:3d:7d:12:63:60:ce:84:1d:7d:66:25:3a:6e:
86:14:ca:22:81:72:3e:ef:3d:69:44:9d:1c:60:d0:
7f:d4:71:b2:da:0d:6b:b6:23:59:7d:99:af:cd:85:
ff:ec:32:91:7b:b5:9b:f0:31:82:a6:fb:4d:15:36:
5d:bd:27:74:c4:1e:dd:c8:5a:73:2e:23:94:06:8b:
0b:31:25:5c:c4:a3:f9:c6:fa:57:51:6a:f9:df:9f:
b3:5e:af:5f:54:49:54:a0:6d:61:ab:dd:32:29:c5:
42:2b:3a:2e:2e:55:c5:e6:0f:67:91:fe:e4:85:6a:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A7:DC:ED:1D:7A:6B:61:72:01:3A:22:3D:00:FB:74:16:97:AF:8F
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:01:2d:e9:b2:65:1c:88:72:5a:50:db:1d:e5:89:77:34:d9:
c4:57:85:d3:c5:81:4b:04:75:c0:01:0a:49:39:67:0d:06:0f:
11:3f:5e:09:97:2f:ca:e2:77:07:dc:1d:df:20:2e:80:bd:41:
25:72:34:bc:15:5c:ff:32:43:03:1e:f1:67:f9:b2:4e:25:97:
8c:d2:95:17:58:72:b9:d5:82:aa:c8:c5:6e:f7:5d:a9:2a:68:
c0:12:e6:f7:59:d5:5b:1f:44:2b:0c:e8:d6:0e:d3:12:f8:22:
02:11:6f:db:e6:3f:63:a0:be:a4:2d:f5:f4:8d:bf:84:27:f7:
33:4f:29:f4:7d:ff:53:19:a7:2a:aa:1b:2e:40:36:e5:91:29:
c0:d0:1d:83:58:bc:93:d8:f1:b4:90:d6:8c:a0:b6:4a:88:31:
3c:a5:11:d7:ef:69:d4:3a:f0:88:6f:96:d0:7c:4c:c3:60:7c:
33:3e:58:9c:ba:ce:87:00:4f:ce:47:fb:2b:2f:e1:fd:f5:58:
21:01:6d:ee:14:ba:7e:cc:c1:3f:da:01:a3:10:3d:ff:de:d2:
9c:e2:e1:64:a2:e6:20:9d:57:ef:2b:48:b0:43:12:06:ef:f4:
66:4e:46:1a:5f:6f:7e:b5:29:ad:26:98:bf:73:d4:ea:2d:35:
8f:09:fd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:33:05 2025 by rpki-client